Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer (raw, json)
Hash identifier: Np7AB9mPYC0DZzBfeqScJtwcwVdCCB71sL/xtCbMAkM=
Subject key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F90EC7C4F138DB60973078D6C335
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210177
IP: 194.62.136.0/22
IP: 2a0d:8d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f9:0e:c7:c4:f1:38:db:60:97:30:78:d6:c3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:46:b4:ce:88:c7:14:03:93:f1:fa:fb:2d:
06:c9:81:fe:af:22:59:3b:25:40:47:3b:3e:8d:a9:
7c:18:41:f3:86:71:71:46:27:14:ff:35:cc:68:2c:
90:78:4a:e1:f3:96:6e:2f:12:8f:e6:3b:7a:48:2c:
1a:86:5c:04:09:0c:ca:43:59:ae:f4:72:1d:bb:ab:
f5:6e:2f:a3:92:6c:fc:2c:1c:c8:21:62:3b:4e:5c:
e5:b1:a4:8b:08:14:5d:95:09:d3:30:59:dd:84:88:
0a:f8:f2:ac:fb:97:0a:a0:49:1e:41:04:f8:d6:c3:
3a:46:f4:e5:27:f5:40:e7:6d:47:af:51:3b:d7:dd:
ff:57:10:0a:c0:bf:a2:28:f9:82:18:64:d0:2f:8c:
4b:46:b2:13:cc:9e:fb:df:ca:36:25:c9:a0:08:10:
ed:64:f4:40:7c:00:14:d3:a3:39:67:a6:26:ab:d8:
d3:65:40:e3:0d:31:c4:4b:2e:41:45:31:19:17:d2:
29:3c:33:55:f0:20:82:e7:00:fc:8e:a2:49:30:2d:
f6:a3:0f:da:1d:22:84:d8:e2:d9:71:99:3d:eb:ba:
28:64:f7:ef:d8:05:19:05:e8:78:69:7a:da:b4:32:
5c:46:32:88:3f:3c:55:ba:84:57:4d:af:c0:40:2b:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.136.0/22
IPv6:
2a0d:8d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210177
Signature Algorithm: sha256WithRSAEncryption
6f:53:29:b8:3d:bc:b2:d7:b5:3d:37:a6:db:85:4e:28:83:42:
c1:f9:43:90:27:e0:a4:2e:85:5f:7c:d7:80:5b:73:31:60:b2:
e7:2c:96:b2:df:28:e1:a3:c8:1d:dc:6c:5d:f0:87:e8:ec:02:
e6:7a:49:bd:0d:7c:93:36:87:52:d2:96:e1:62:f4:b6:f1:7d:
55:c8:99:fa:aa:c6:cb:cd:44:6f:db:ca:82:bd:d6:ca:07:6b:
4f:ee:0a:da:79:b0:ec:9c:8c:93:15:37:33:bd:3a:dd:e4:ea:
1a:f6:fe:5f:4f:97:7e:ac:ac:74:0c:e3:bf:2f:8a:b8:96:ed:
97:96:b4:bf:5e:a2:53:8e:05:91:90:b3:b5:99:73:00:43:73:
77:24:47:17:b6:8d:58:e1:58:7e:d3:a2:6f:92:b9:06:b8:64:
04:8b:f2:b1:e3:09:d5:44:84:18:f0:39:dd:ad:b8:96:13:63:
50:45:19:3c:44:e0:b4:81:c0:e7:33:52:f3:c9:76:3d:fc:c6:
45:32:84:8b:cc:28:eb:5f:76:51:26:bf:b2:0f:df:ee:de:ca:
73:0c:8b:3e:4f:25:d4:c7:04:b4:48:2d:86:e8:30:f0:f0:59:
ec:e9:db:f9:2e:31:09:fa:18:4e:c4:94:91:4e:52:f6:63:79:
42:31:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:16 2025 by rpki-client